Most home routers lack simple Linux OS hardening security

A new assessment of 28 popular models for home users failed to find a single one with firmware that had fully enabled underlying security hardening features offered by Linux. Continue reading Most home routers lack simple Linux OS hardening security

TP-Link introduces next-generation WiFi routers that support Wi-Fi 6 wireless standard

TP-Link unveiled two new WiFi routers—the Archer AX6000 and the Archer AX11000. Both routers support the new 802.11ax wireless standard, also known as Wi-Fi 6. The 802.11ax standard features technologies such as OFDMA, AX MU-MIMO, 160MHz channel and 10… Continue reading TP-Link introduces next-generation WiFi routers that support Wi-Fi 6 wireless standard

“Classic” bugs open TP-Link’s SafeStream Gigabit Broadband VPN Router to attack

Cisco Talos researchers have flagged four serious vulnerabilities in TP-Link’s SafeStream Gigabit Broadband VPN Router (TL-R600VPN). All four affect the device’s HTTP server, and can lead to denial of service, information disclosure, and re… Continue reading “Classic” bugs open TP-Link’s SafeStream Gigabit Broadband VPN Router to attack

Regularly updating your wireless router is not enough to ward off attacks

Wireless routers are the most often attacked and exploited type of IoT device. They are also one of the rare IoT devices that most of us can’t do without. We need them to be as secure as can be, but unfortunately most of them are not. The non-pro… Continue reading Regularly updating your wireless router is not enough to ward off attacks

Popular TP-Link wireless home router open to remote hijacking

By concatenating a known improper authentication flaw with a newly discovered CSRF vulnerability, remote unauthenticated attackers can obtain full control over TP-Link TL-WRN841N, a popular wireless consumer router used worldwide. “This type of r… Continue reading Popular TP-Link wireless home router open to remote hijacking

New infosec products of the week​: August 31, 2018

Moogsoft announces Observe expanding its AIOps platform capabilities Moogsoft Observe ingests time-series and metrics data in real-time and applies AI to detect incidents at the source of the problem. Observe stores anomalous and contextual data, givin… Continue reading New infosec products of the week​: August 31, 2018

DDoS Attacks Get Bigger, Smarter and More Diverse

DDoS attacks is relentless. New techniques, new targets and a new class of attackers continue to reinvigorate one of the internet’s oldest nemesis. Continue reading DDoS Attacks Get Bigger, Smarter and More Diverse

FBI: Kindly Reboot Your Router Now, Please

The Federal Bureau of Investigation (FBI) is warning that a new malware threat has rapidly infected more than a half-million consumer devices. To help arrest the spread of the malware, the FBI and security firms are urging home Internet users to r… Continue reading FBI: Kindly Reboot Your Router Now, Please